Which of the following is the GREATEST advantage of implementing a risk management program?

A. Promoting a risk-aware culture
B. Improving security governance
C. Enabling risk-aware decisions
D. Reducing residual risk